topic Re: How to convert bytes to gb in dashboard? in Dashboards & Visualizations

How to convert bytes to gb in dashboard?

nedwards94 — Thu, 19 Jul 2018 12:32:56 GMT

Created two panels with single value vizualisation on a dashboard displaying all traffic bytes inbound and outbound. Trying to convert the value to GB therefore need to divide it. Managed to get a search string that works on just a search, but doesn't display within the dashboard.

index="siem" sourcetype=proxy 
| stats sum(bytes_out) | eval GB_bytes=(bytes_out/1000000000) | stats count by GB_bytes

Re: How to convert bytes to gb in dashboard?

renjith_nair — Thu, 19 Jul 2018 13:13:13 GMT

@nedwards94,

sum(bytes_out) gives the field as sum(bytes_out) itself. You need to alias it to bytes_out.

Try this

index="siem" sourcetype=proxy 
| stats sum(bytes_out)  as bytes_out| eval GB_bytes=(bytes_out/1000000000) | stats count by GB_bytes

Re: How to convert bytes to gb in dashboard?

nedwards94 — Thu, 19 Jul 2018 13:51:46 GMT

Ah, how annoying just a tiny addition. Thank you so much!

Re: How to convert bytes to gb in dashboard?

hunderliggur — Wed, 30 Sep 2020 00:05:16 GMT

KB = bytes/1024
MB = bytes/(1024*1024) = bytes/1,048,576
GB = bytes/(1024*1024*1024) = bytes/1,073,741,824

There is a ~7% difference in volume using the binary values versus the straight decimal value (decimal rate will appear "higher")